Data processing addendum.

The DPA governs how we process data on your behalf. The current executable version is available to customers and evaluators on request.

Scope and roles

You control the content you bring to Leela. Humblepaper, Inc. processes it on your behalf, only to provide the service. The DPA sets out this controller and processor relationship.

Processing and purpose

Deal content is processed solely to perform the work you ask of Leela: review, drafting and negotiation support. It is not used to train models and is not sold or shared for any other purpose.

Security measures

Technical and organizational measures include encryption in transit and at rest, isolation by matter and role-based access controls. Security describes our current posture.

Subprocessors

We maintain a current, public list of subprocessors. The executable DPA sets out how we engage them and how changes are communicated.

Data subject requests

We provide reasonable assistance with access, correction and deletion requests concerning the data we process for you.

International transfers

Where processing crosses borders, the executable DPA documents the safeguards relied on.